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DETAILED ACTION 

Information Disclosure Statement 

1 . The information disclosure statement (IDS) submitted on 08/1 1/2008 is in compliance 
with the provisions of 37 CFR 1.97. Accordingly, the information disclosure statement is being 
considered by the examiner. 

Specification 

2. The objection to the disclosure from the Office Action dated 04/29/2008 is withdrawn 
based on the amendments submitted on 08/01/2008. The amendments to the disclosure 
submitted on 08/01/2008 are accepted. The disclosure is further objected to because of the 
following informalities: For lack of support for claim terminology i.e. in claims 12 and 20 
"computer readable medium" and "computer-readable program" and in claims 1-4, 6,1, 12, 13, 
and 15-22 "authenticating device" ; in claims 1-3, 11-13, 19-22 "random value", "first random 
value " and "second random value ". Appropriate correction is required. 

Claim Objections 

3. The objections to claims 4-10, 14-18, and 20 are withdrawn based on the amendments 
submitted on 08/01/2008. Claim 16 is objected to because of the following informalities: claim 
16, line 7 states "the plurality of authenticating means" it should state "the plurality of 
authenticating devices" otherwise it will lack antecedent basis; claim 21, lines 23 and 28 and 
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claim 22, lines 19 and 23 state "the decrypted further encrypted value" they should state "the 
decrypted still further encrypted value". Appropriate correction is required. 



Claim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

4. Claims 1-4, 6-8, and 10-22 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. Through out these claims the applicant speaks of an 
authenticating device and no where in the specification is this device disclosed. However, 
multiple other devices are taught such as a management device, a mobile communication device, 
and a data processing device it is unclear to the examiner which device is being referred to in the 
claims. Furthermore, through out these claims the applicant speaks of "random value", "first 
random value" and "second random value" the examiner is mapping "first random value" to Ra 
and "second random value" to Rb, but, she has no idea what the applicant is mapping "random 
value" to. And in claim 22, line 4 it is unclear to the examiner if this "second encryption 
process" is the same as the "second encryption process" of claim 2 or a different encryption 
process. 

Claim 18 recites the limitation "the authenticity" and "the authentication process" in lines 
6 and 7. There is insufficient antecedent basis for this limitation in the claim. The antecedent 
basis for these limitations was amended out. 
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Claim 22 recites the limitation "the first random value device" in line 19. There is 
insufficient antecedent basis for this limitation in the claim. 

Response to Amendment 

5. The 35 U.S.C. 112, second paragraph rejection on claims 4, 6, 7, 13, 15, 19, and 20 is 
withdrawn based on the applicant's amendments submitted on 08/01/2008. The 

35 U.S.C. 101 rejection on claims 12 and 20 is withdrawn based on the amendments 
submitted on 08/01/2008. The 35 U.S.C. 101 rejection on claims 2 and 19 is not withdrawn 
because in claims 2 and 19 it is still unclear whether the device could be software and/or 
hardware. Paragraph 0080 speaks of the data processing device of the eighth aspect which is in 
paragraph 0025; paragraph 0025 does not indicate any sort of hardware let alone an 
authenticating device or any device. 

Status of Claims 

6. Claims 1-22 are pending in this Office Action. 
Claims 1-20 are amended. 

Claims 21-22 are new. 

Response to Arguments 

7. Applicant's arguments with respect to claims 1-22 have been considered but are moot in 
view of the new ground(s) of rejection. 
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Applicant's Invention as claimed: 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to w hich said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

8. Claims 1-22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
US 6240517 (Nishioka) in view of US 5272754 (Boerbert) and in view of US 5345506 
(Tsubakiyama). 

As to claim 1, Nishioka discloses (currently amended) a data processing method 
performed by moans a device to be authenticated and an authenticating moans device , the moans 
device to be authenticated holding first authentication use data generated by encryption using 
key data and the authenticating device moans holding the key data, the method comprising: 

generating a first random value at the device to be authenticated (Nishioka column 11, 
lines 47-54); 

encrypting the first random value at the device to be authenticated using a first encryption 
process and the first authentication use data (Nishioka column 11, lines 47-54); 

providing key designation data designating the key data and the encrypted first random 
value from the means device to be authenticated to the authenticating device means (Nishioka 
column 11, lines 55-60); 

obtaining the key data at the authenticating device using the key designation data 
(Nishioka column 11, lines 13-17); 



Application/Control Number: 10/527,072 Page 6 

Art Unit: 2436 

performing encryption at the authenticating means device using the designated key data 
to generate second authentication use data (Nishioka column 11, lines 60-64). Nishioka does not 
explicitly teach decrypting the encrypted first random value at the authenticating device using 
the first encryption process and the second authentication use data to obtain the first random 
value; 

encrypting the first random value at the authenticating device using a second encryption 
process and the second authentication use data to generate a further encrypted value; 

providing the further encrypted value from the authenticating device the device to be 
authenticated; 

decrypting the further encrypted value at the device to be authenticated using the second 
encryption process and the first authentication use data; 

comparing the decrypted further encrypted value first authentication use data with the 
first random value second authentication use data at the device to be authenticated ; and 

executing processing related to the key data in the authenticating means device when in 
response to the comparingsen step determininges that the decrypted further encrypted value and 
the first random value are the same thereby indicating that the first authentication use data and 
the second authentication use data are the same. 

However, Tsubakiyama discloses decrypting the encrypted first random value at the 
authenticating device using the first encryption process and the second authentication use data to 
obtain the first random value (Tsubakiyama column 3, lines 66-68); 
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encrypting the first random value at the authenticating device using a second encryption 
process and the second authentication use data to generate a further encrypted value 
(Tsubakiyama column 4, lines 8-10); 

providing the further encrypted value from the authenticating device the device to be 
authenticated (Tsubakiyama column 4, lines 8-10); 

decrypting the further encrypted value at the device to be authenticated using the second 
encryption process and the first authentication use data ( Tsubakiyama column 4, lines 16-22)^ 

comparing the decrypted further encrypted value first authentication use data with the 
first random value second authentication use data at the device to be authenticated ( Tsubakiyama 
column 4, lines 16-22); and 

executing processing related to the key data in the authenticating moans device when in 
response to the comparingsefl step determininges that the decrypted further encrypted value and 
the first random value are the same thereby indicating that the first authentication use data and 
the second authentication use data are the same (Tsubakiyama column 4, lines 16-24). 

It would be obvious to one of ordinary skill in the art at the time of the applicant's 
invention to combine Nishioka and Tsubakiyama because it is necessary to be able to provide an 
extensive mutual authentication protocol between devices or client and server or networks and 
users in order to prevent cipher attacks and increase the security of the transactions 
(Tsubakiyama column 2, lines 5-9). 

As to claim 4, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 3, wherein the executing step includes executing the functions of the 
authenticating means device authorized to the means device to be authenticated related to the key 
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data or accessing the data held by the authenticating mean sdevice (Nishioka column 10, lines 10- 
30). 

As to claim 5, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 3, wherein the generating step includes generating the second authentication 
use data is generated using a plurality of different key data, and the executing step includes 
executing a plurality of processings steps related to the plurality of different key data (Nishioka 
Figure 16, column 11, lines 60-67, and column 12, lines 1-12). 

As to claim 6, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 5, wherein the executing step includes executing a plurality of processings 
steps including functions of the authenticating moans device and accessing the-data held by the 
authenticating mcans dcvicc relating to the plurality of different key data (Nishioka Figure 16, 
column 11, lines 60-67, and column 12, lines 1-12). 

As to claim 7, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 3, wherein the executing step includes accessing the a plurality of data modules 
related to single key data when the authenticating means device holds a plurality of data modules 
as data (Nishioka Figure 16: the switching unit 500 accesses the first and second authentication 
data (plurality of data modules) in comparator 540). 

As to claim 8, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 3, wherein the receiving step includes receiving further comprising reading the 
key designation data read by a device of the means device to be authenticated from an integrated 
circuit holding the first authentication use data and the key designation data (Nishioka column 
11, lines 37-54). 
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As to claim 9, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 3, wherein the first authentication use data is data generated by encrypting 
predetermined data using the key data (Nishioka column 11, lines 47-54). 

As to claim 10, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 9, wherein the first authentication use data is data generated by encrypting data 
obtained by encrypting the predetermined data using the key data by further using tamper- 
proofing key data managed by the means -device to be authenticated (Nishioka column 13, lines 
20-67 and column 14, lines 1-51: the further tamper-proofing is enabled in the third 
embodiment). 

As to claim 14, Nishioka discloses (currently amended) the A data processing method as 
set forth in claim 13, wherein the moans device to be authenticated reads and holds the first 
authentication use data and the key designation data from a predetermined integrated circuit 
(Nishioka column 11, lines 37-54). 

As to claim 17, the modified Nishioka discloses (currently amended) the A data 
processing method as set forth in claim 13. The modified Nishioka does not explicitly teach 
further comprising providing a screen displaying an image corresponding to the authenticating 
means device for performing the processing by using a plurality of different patterns in 
accordance with an operation state of the authenticating-^fteans device . 

However, Boerbert discloses further comprising providing a screen displaying an image 
corresponding to the authenticating means device for performing the processing by using a 
plurality of different patterns in accordance with an operation state of the authenticating 
means device (Boerbert column 5, lines 12-26). 
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It would be obvious to one of ordinary skill in the art at the time of the applicant's 
invention to combine Nishioka and Boerbert because Nishioka discloses a PC, which controls the 
switching unit (authenticating device), with a display (Nishioka column 8, lines 1-5 and Figure 
12) it would be logical that it would display the operation state of the authenticating device such 
as in Boerbert for diagnostics, for finding out which units are on, for confirming whether or not a 
device to be authenticated is authentic, etc. (Boerbert column 5, lines 12-26). 

As to claim 18, the modified Nishioka discloses (currently amended) the A data 
processing method as set forth in claim 17. The modified Nishioka does not explicitly teach 
wherein the screen providing step includes providing a screen displaying an image corresponding 
to the authenticating moans device by a pattern enabling determination of whether the 
authenticating mcans dcvicc has confirmed the authenticity of the moans device to be 
authenticated by the authentication process. 

However, Boerbert discloses wherein the screen providing step includes providing a 
screen displaying an image corresponding to the authenticating means device by a pattern 
enabling determination of whether the authenticating means device has confirmed the authenticity 
of the means device to be authenticated by the authentication process (Boerbert column 5, lines 
12-26). 

It would be obvious to one of ordinary skill in the art at the time of the applicant's 
invention to combine Nishioka and Boerbert because Nishioka discloses a PC, which controls the 
switching unit (authenticating device), with a display (Nishioka column 8, lines 1-5 and Figure 
12) it would be logical that it would display the operation state (the authenticity of the device to 
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be authenticated) of the authenticating device such as in Boerbert for confirming whether or not 
a device to be authenticated is authentic, etc. (Boerbert column 5, lines 12-26). 

As to claims 2, 3, 11, 12, 13, 15, 16, 19, 20, 21, and 22, claims 2, 3, 11, 12, 13, 15, 16, 
19, 20, 21, and 22 encompass the same scope of the invention as those of claims 1, 4, and 5 with 
the additions of claim 1 1 inputting means (Nishioka column 4, lines 59-61); claim 21 and 22 
second random value (Tsubakiyama columns 3 and 4, lines 35-68 and 1-20: r n and r u ); and claim 
12 computer-readable medium (Nishioka column 4, lines 63-67). Therefore, claims 2, 3, 11, 12, 
13, 15, 16, 19, 20, 21, and 22 are rejected for the same reasons as stated above with respect to 
claims 1,4, and 5. 

Conclusion 

9. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Rebecca L. Pachura whose telephone number is (571) 270-3402. 
The examiner can normally be reached on Monday-Thursday 10:00 am-8:00 pm EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571) 272-4195. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Rebecca L Pachura/ 
Examiner, Art Unit 2436 

/Carl Colin/ 

Primary Examiner, Art Unit 2436 
12/1/2008 



